» NELO_CrashReporter.exe
Overview
Analysis
File Details
Programs (1)

NELO_CrashReporter.exe

NELO_CrashReporter Application

NHN Japan Corporation

This is installed with LINE.

File name:

Publisher:

NHN Corporation (signed by NHN Japan Corporation)

Product:

NELO_CrashReporter Application

Version:

1, 3, 0, 0

MD5:

856edce33ec300b5d034d3e6a2e71d7a

SHA-1:

a2ae132536f16e8a38f9f1550c8f0f8a84006e63

SHA-256:

b4e464b6f9c4f3a5f2d951f89c480f054f5072bc0eed3bb797a49b25f5953146

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 11:18:04 AM UTC (today)

File size:

729.6 KB (747,120 bytes)

Product version:

1, 3, 0, 0

Trademarks:

NHN NELO CrashReporter

Original file name:

NELO_CrashReporter.exe

File type:

Executable application (Win32 EXE)

Language:

English

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\nelo_crashreporter.exe

Digital Signature

Signed by:

NHN Japan Corporation

Authority:

VeriSign, Inc.

Valid from:

12/20/2011 7:00:00 AM

Valid to:

12/20/2012 6:59:59 AM

Subject:

CN=NHN Japan Corporation, OU=Hangame Division1, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NHN Japan Corporation, L=Shinagawa-ku, S=Tokyo, C=JP

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1F44467A226581FD248F88D1725A3C8B

File PE Metadata

Compilation timestamp:

6/11/2009 9:38:58 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:uluTt5T4rbEfztOLwo6OrSyXUsF8DZSAT2i05rlo0uVvlWypoHkbXngpuMrEkek4:vjKgLcko2kUsYKzlBGlgLnek4

Entry address:

0x194000

Entry point:

83, EC, 04, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, 80, 0A, 00, 2D, 7F, CF, 09, 10, 05, 74, CF, 09, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, 5F, CF, C7, 30, 68, 01, BB, F5, 65, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, 6D, 00, 9C, AC, 54, 7A, 15, A4, B0, 84, 0F, 8A, 87, 5C... 
[+]

Entropy:

7.8641 (probably packed)

Code size:

48 KB (49,152 bytes)

The file NELO_CrashReporter.exe has been discovered within the following program.

LINE by NHN Corp.

Publisher's description - “A global messaging service loved in over 230 countries worldwide. Stay in touch with your friends, whenever, and wherever you are! Use LINE on your smartphone while on the move and from the PC while in the office or at home.”

line.naver.jp

About 8% of users remove it

Scan NELO_CrashReporter.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.